JSR-000058 Java TM 2 Platform, Enterprise Edition 1.3 Specification

3. Security 3-1
3.1 Introduction 3-1
3.2 A Simple Example 3-2
3.3 Security Architecture 3-5
3.3.1 Goals 3-5
3.3.2 Non Goals 3-6
3.3.3 Terminology 3-7
3.3.4 Container Based Security 3-8
3.3.5 Declarative Security 3-8
3.3.6 Programmatic Security 3-8
3.3.7 Distributed Security 3-9
3.3.8 Authorization Model 3-10
3.3.9 Role Mapping 3-10
3.3.10 HTTP Login Gateways 3-11
3.3.11 User Authentication 3-11
3.3.11.1 Web Client 3-11
HTTP Basic Authentication 3-12
HTTPS Authentication 3-12
Form Based Authentication 3-13
Web Single Signon 3-13
Login Session 3-13
3.3.11.2 Application Client 3-14
3.3.11.3 Lazy Authentication 3-14
3.4 User Authentication Requirements 3-15
3.4.1 Web Clients 3-15
3.4.1.1 Web Single Signon 3-15
3.4.1.2 Login Sessions 3-15
3.4.1.3 Required Login Mechanisms 3-15
3.4.1.4 Unauthenticated Users 3-16
3.4.2 Application Clients 3-17
3.4.3 Resource Authentication Requirements 3-18
vi Java 2 Platform Enterprise Edition, v1.3, Proposed Final Draft (Sun Microsystems, Inc.)